Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router

Transcription

1 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router Rev:

2 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright 2014 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved.

3 FCC STATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/ TV technician for help. This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: 1) This device may not cause harmful interference. 2) This device must accept any interference received, including interference that may cause undesired operation. Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment. Note: The manufacturer is not responsible for any radio or TV interference caused by unauthorized modifications to this equipment. Such modifications could void the user s authority to operate the equipment. FCC RF Radiation Exposure Statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This device and its antenna must not be co-located or operating in conjunction with any other antenna or transmitter. To comply with FCC RF exposure compliance requirements, this grant is applicable to only Mobile Configurations. The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter. CE Mark Warning

4 This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. National Restrictions This device is intended for home and office use in all EU countries (and other countries following the EU directive 1999/5/EC) without any limitation except for the countries mentioned below: Country Restriction Reason/remark Bulgaria France None Outdoor use limited to 10 mw e.i.r.p. within the band MHz General authorization required for outdoor use and public service Military Radiolocation use. Refarming of the 2.4 GHz band has been ongoing in recent years to allow current relaxed regulation. Full implementation planned 2012 Italy Luxembourg Norway None None Implemented If used outside of own premises, general authorization is required General authorization required for network and service supply(not for spectrum) This subsection does not apply for the geographical area within a radius of 20 km from the centre of Ny-Ålesund Russian Federation None Only for indoor applications Note: Please don t use the product outdoors in France. Canadian Compliance Statement This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions: (1)This device may not cause interference, and (2)This device must accept any interference, including interference that may cause undesired operation of the device. Cet appareil est conforme aux norms CNR exemptes de licence d Industrie Canada. Le fonctionnement est soumis aux deux conditions suivantes: (1)cet appareil ne doit pas provoquer d interférences et (2)cet appareil doit accepter toute interférence, y compris celles susceptibles de provoquer un fonctionnement non souhaité de l appareil. This device has been designed to operate with the antennas listed below, and having a maximum gain of 5 dbi. Antennas not included in this list or having a gain greater than 5 dbi are strictly prohibited for use with this device. The required antenna impedance is 50 ohms. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that permitted for successful communication.

5 Industry Canada Statement Complies with the Canadian ICES-003 Class B specifications. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. This device complies with RSS 210 of Industry Canada. This Class B device meets all the requirements of the Canadian interference-causing equipment regulations. Cet appareil numérique de la Classe B respecte toutes les exigences du Règlement sur le matériel brouilleur du Canada. Korea Warning Statements: 당해 무선설비는 운용중 전파혼신 가능성이 있음. NCC Notice& BSMI Notice: 注 意! 依 據 低 功 率 電 波 輻 射 性 電 機 管 理 辦 法 第 十 二 條 經 型 式 認 證 合 格 之 低 功 率 射 頻 電 機, 非 經 許 可, 公 司 商 號 或 使 用 者 均 不 得 擅 自 變 更 頻 率 加 大 功 率 或 變 更 原 設 計 之 特 性 或 功 能 第 十 四 條 低 功 率 射 頻 電 機 之 使 用 不 得 影 響 飛 航 安 全 及 干 擾 合 法 通 行 ; 經 發 現 有 干 擾 現 象 時, 應 立 即 停 用, 並 改 善 至 無 干 擾 時 方 得 繼 續 使 用 前 項 合 法 通 信, 指 依 電 信 規 定 作 業 之 無 線 電 信 低 功 率 射 頻 電 機 需 忍 受 合 法 通 信 或 工 業 科 學 以 及 醫 療 用 電 波 輻 射 性 電 機 設 備 之 干 擾 減 少 電 磁 波 影 響, 請 妥 適 使 用 安 全 諮 詢 及 注 意 事 項 請 使 用 原 裝 電 源 供 應 器 或 只 能 按 照 本 產 品 注 明 的 電 源 類 型 使 用 本 產 品 清 潔 本 產 品 之 前 請 先 拔 掉 電 源 線 請 勿 使 用 液 體 噴 霧 清 潔 劑 或 濕 布 進 行 清 潔 注 意 防 潮, 請 勿 將 水 或 其 他 液 體 潑 灑 到 本 產 品 上 插 槽 與 開 口 供 通 風 使 用, 以 確 保 本 產 品 的 操 作 可 靠 並 防 止 過 熱, 請 勿 堵 塞 或 覆 蓋 開 口 請 勿 將 本 產 品 置 放 於 靠 近 熱 源 的 地 方 除 非 有 正 常 的 通 風, 否 則 不 可 放 在 密 閉 位 置 中 請 不 要 私 自 打 開 機 殼, 不 要 嘗 試 自 行 維 修 本 產 品, 請 由 授 權 的 專 業 人 士 進 行 此 項 工 作 Продукт сертифіковано згідно с правилами системи УкрСЕПРО на відповідність вимогам нормативних документів та вимогам, що передбачені чинними законодавчими актами України.

6 Safety Information When product has power button, the power button is one of the way to shut off the product; when there is no power button, the only way to completely shut off power is to disconnect the product or the power adapter from the power source. Don t disassemble the product, or make repairs yourself. You run the risk of electric shock and voiding the limited warranty. If you need service, please contact us. Avoid water and wet locations. This product can be used in the following countries: AT BG BY CA CZ DE DK EE ES FI FR GB GR HU IE IT LT LV MT NL NO PL PT RO RU SE SK TR UA

7 TP-LINK TECHNOLOGIES CO., LTD For the following equipment: DECLARATION OF CONFORMITY Product Description: AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router Model No.: Archer D7 Trademark: TP-LINK We declare under our own responsibility that the above products satisfy all the technical regulations applicable to the product within the scope of Council Directives: Directives 1999/5/EC, Directives 2004/108/EC, Directives 2006/95/EC, Directives 1999/519/EC, Directives 2011/65/EU The above product is in conformity with the following standards or other normative documents EN V1.7.1: 2006 EN V1.9.2:2011& EN V2.2.1:2012 EN 55022:2010 EN 55024:2010 EN :2006+A1:2009+A2:2009 EN :2008 EN :2006+A11:2009+A1:2010+A12:2011 EN62311:2008 EN The product carries the CE Mark: Person responsible for making this declaration: Yang Hongliang Product Manager of International Business Date of issue: 2014 TP-LINK TECHNOLOGIES CO., LTD Building 24 (floors 1, 3, 4, 5), and 28 (floors 1-4) Central Science and Technology Park, Shennan Rd, Nanshan, Shenzhen, China

8 CONTENTS Package Contents...1 Chapter 1. Product Overview Overview of the Modem Router Main Features Panel Layout The Front Panel The Back Panel... 6 Chapter 2. Connecting the Modem Router System Requirements Installation Environment Requirements Connecting the Modem Router... 7 Chapter 3. Quick Installation Guide TCP/IP Configuration Quick Installation Guide Chapter 4. Configuring the Modem Router Login Status Quick Setup Operation Mode Network WAN Settings Interface Grouping LAN Settings IPv6 LAN Settings MAC Clone ALG Settings DSL Settings IPSec VPN IPTV DHCP Server DHCP Settings...38

9 4.7.2 Clients List Address Reservation Conditional Pool Wireless 2.4GHz Basic Settings WPS Settings Wireless Security Wireless Schedule Wireless MAC Filtering Wireless Advanced Wireless Status Wireless 5GHz Basic Settings WPS Settings Wireless Security Wireless Schedule Wireless MAC Filtering Wireless Advanced Wireless Status Guest Network Basic Settings 2.4GHz Basic Settings 5GHz Guest Status 2.4GHz Guest Status 5GHz USB Settings USB Mass Storage User Accounts Storage Sharing FTP Server Media Server Print Server Route Settings Default Gateway Static Route RIP Settings IPv6 Route Settings... 75

10 IPv6 Default Gateway IPv6 Static Route Forwarding Virtual Servers Port Triggering DMZ UPnP Parental Control Firewall Rule LAN Host WAN Host Schedule IPv6 Firewall IPv6 Rule IPv6 LAN Host IPv6 WAN Host IPv6 Schedule IPv6 Tunnel Bandwidth Control IP&MAC Binding Binding Settings ARP List Dynamic DNS Diagnostic System Tools System Log Time Settings Manage Control CWMP Settings SNMP Settings Backup & Restore Factory Defaults Firmware Upgrade Reboot Statistics

11 4.24 Logout Appendix A: Specifications Appendix B: Troubleshooting ppendix C: Technical Support...113

12 Package Contents The following contents should be found in your package: One Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router One Power Adapter for Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router Quick Installation Guide One RJ45 cable Two RJ11 cables One ADSL splitter One Resource CD for Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router, including: This User Guide Other Helpful Information Note: Make sure that the package contains the above items. If any of the listed items are damaged or missing, please contact your distributor. 1

13 Chapter 1. Product Overview Thank you for choosing the Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router. 1.1 Overview of the Modem Router The Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router integrates 4-port Switch, Firewall, NAT-Router and Wireless AP. The AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router delivers exceptional range and speed, which can fully meet the need of Small Office/Home Office (SOHO) networks and the users demanding higher networking performance. The Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router utilizes integrated ADSL2+ transceiver and high speed MIPS CPU. The Router supports full-rate ADSL2+ connectivity conforming to the ITU and ANSI specifications. In addition to the basic DMT physical layer functions, the ADSL2+ PHY supports dual latency ADSL2+ framing (fast and interleaved) and the I.432 ATM Physical Layer. The modem router provides up to 450Mbps (2.4GHz) Mbps (5GHz) wireless connection with other wireless clients. The incredible speed makes it ideal for handling multiple data streams at the same time, which ensures your network stable and smooth. The performance of this ac wireless Router will give you the unexpected networking experience at speed much faster than n. It is also compatible with all IEEE a, IEEE b, IEEE g and IEEE n, products. With multiple protection measures, including SSID broadcast control and wireless LAN 64/128 WEP encryption, Wi-Fi protected Access (WPA2-PSK, WPA-PSK), as well as advanced Firewall protections, the Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router provides complete data privacy. The Router provides flexible access control, so that parents or network administrators can establish restricted access policies for children or staffs. It also supports Virtual Server and DMZ host for Port Triggering, and then the network administrators can manage and monitor the network in real time with the remote management function. Since the Router is compatible with virtually all the major operating systems, it is very easy to manage. Quick Setup Wizard is supported and detailed instructions are provided step by step in this user guide. Before installing the Router, please look through this guide to know all the Router s functions. 2

14 1.2 Main Features Complies with IEEE ac to provide a wireless data rate of up to 450Mbps (2.4GHz) Mbps (5GHz). Four 10/100/1000Mbps Auto-Negotiation RJ45 LAN ports (Auto MDI/MDIX), one RJ11 port. Provides external splitter. Adopts Advanced DMT modulation and demodulation technology. Supports bridge mode and Router function. Multi-user sharing a high-speed Internet connection. Downstream data rates up to 24Mbps, upstream data rates up to 1Mbps. Supports long transfers, the max line length can reach to 6.5Km. Supports remote configuration and management through SNMP and CWMP. Supports PPPoE, it allows connecting the internet on demand and disconnecting from the Internet when idle. Provides reliable ESD and surge-protect function with quick response semi-conductive surge protection circuit. High speed and asymmetrical data transmit mode, provides safe and exclusive bandwidth. Compatible with all mainstreams DSLAM (CO). Provides integrated access of internet and route function which face to SOHO user. Real-time Configuration and device monitoring. Supports Multiple PVC (Permanent Virtual Circuit). Built-in DHCP server. Built-in firewall, supporting IP/MAC filter and URL filter. Supports Virtual Server, DMZ host and Port Triggering. Supports Dynamic DNS, UPnP and Static Routing. Supports system log and flow Statistics. Supports firmware upgrade and Web management. Provides WPA-PSK/WPA2-PSK data security, TKIP/AES encryption security. Provides 64/128-bit WEP encryption security and wireless LAN ACL (Access Control List). Supports USB Storage Sharing, Print Server, FTP Server, Media Server. Supports Ethernet WAN (EWAN). Supports Bandwidth Control. Supports IPv6. Supports Guest Network. 3

15 1.3 Panel Layout The Front Panel Figure 1-1 The modem router s LEDs are located on the top panel (View from top to bottom). They indicate the device s working status. For details, please refer to LED Explanation. LED Explanation: Name Status Indication (WPS) (USB) On Flash Off On Flash Off A wireless device has been successfully added to the network by WPS function. WPS handshaking is in process and will continue for about 2 minutes. Please press the WPS button on other wireless devices that you want to add to the network while the LED is flashing. A wireless device has failed to be added to the network by WPS function. Please refer to WPS Settings for more information. A storage device or printer has connected to the USB port. The USB port is sending or receiving data. No storage device or printer is plugged into the USB port. 4

16 (LAN) (Wireless) (Internet) (ADSL) (Power) On Off On Off On Off On Flash Off On Off There is a device connected to this LAN port, or the LAN port is sending or receiving data. There is no device connected to this LAN port. Wireless is enabled. The modem router is working on 2.4GHz/5 GHz radio band. Wireless is disabled. The network is available with a successful Internet connection. There is no successful Internet connection or the modem router is operating in Bridge mode. Please refer to Note 2 for troubleshooting. ADSL line is synchronized and ready to use. The ADSL negotiation is in progress. ADSL synchronization fails. Please refer to Note 1 for troubleshooting. The modem router is powered on. The modem router is off. Please ensure that the power adapter is connected correctly. Note: 1. If the ADSL LED is off, please check your Internet connection first. Refer to 2.3 Connecting the Modem Router for more information about how to make Internet connection correctly. If you have already made a right connection, please contact your ISP to make sure if your Internet service is available now. 2. If the Internet LED is off, please check your ADSL LED first. If your ADSL LED is also off, please refer to Note 1. If your ADSL LED is ON, please check your Internet configuration. You may need to check this part of information with your ISP and make sure everything have been input correctly. 5

17 1.3.2 The Back Panel Figure 1-2 ADSL: Through the port, you can connect the modem router with the telephone. Or you can connect them by an external separate splitter. For details, please refer to 2.3 Connecting the Modem Router. USB2, USB1: The USB port connects to a USB storage device or a USB printer. WPS: The switch for the WPS function. For details, please refer to WPS Settings. WiFi ON/OFF: The switch for the WiFi function. Press it to enable/disable the WiFi function. RESET: There are two ways to reset the modem router's factory defaults. Method one: With the modem router powered on, use a pin to press and hold the Reset button for at least 8-10 seconds. And the modem router will reboot to its factory default settings. Method two: Restore the default setting from Factory Defaults of the modem router's Web-based Management. LAN4/WAN, LAN3, LAN2, LAN1: Through these ports, you can connect the modem router to your PC or the other Ethernet network devices. In wireless router mode you will be able to connect to Cable/FTTH/VDSL/ADSL device. POWER ON/OFF: The switch for the power. POWER: The Power plug is where you will connect the power adapter. Antennas: Used for wireless operation and data transmit. 6

18 Chapter 2. Connecting the Modem Router 2.1 System Requirements Broadband Internet Access Service (DSL/Cable/Ethernet). PCs with a working Ethernet Adapter and an Ethernet cable with RJ45 connectors. TCP/IP protocol on each PC. Web browser, such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari. 2.2 Installation Environment Requirements The Product should not be located where it will be exposed to moisture or excessive heat. Place the Router in a location where it can be connected to the various devices as well as to a power source. Make sure the cables and power cord are safely placed out of the way so they do not create a tripping hazard. The Router can be placed on a shelf or desktop. Keep away from the strong electromagnetic radiation and the device of electromagnetic sensitive. 2.3 Connecting the Modem Router Before installing the device, please make sure your broadband service provided by your ISP is available. If there is any problem, please contact your ISP. Before cable connection, cut off the power supply and keep your hands dry. You can follow the steps below to install it. Step 1: Connect the ADSL Line. Method one: Plug one end of the twisted-pair ADSL cable into the ADSL port on the rear panel of Archer D7, and insert the other end into the wall socket. Method two:you can use a separate splitter. External splitter can divide the data and voice, and then you can access the Internet and make calls at the same time. The external splitter has three ports: LINE: Connect to the wall jack PHONE: Connect to the phone sets MODEM: Connect to the ADSL port of Archer D7 Plug one end of the twisted-pair ADSL cable into the ADSL port on the rear panel of Archer D7. Connect the other end to the MODEM port of the external splitter. Step 2: Connect the Ethernet cable. Attach one end of a network cable to your computer s Ethernet port or a regular hub/switch port, and the other end to the LAN port on the modem router Archer D7. Step 3: Power on the computers and LAN devices. Step 4: Attach the power adapter. Connect the power adapter to the power connector on the rear of the device and plug in the adapter to an electrical outlet or power extension. The electrical outlet shall be installed near the device and shall be easily accessible. 7

19 Figure 2-1 8

20 Chapter 3. Quick Installation Guide This chapter will show you how to configure the basic functions of your Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router using Quick Setup Wizard within minutes. 3.1 TCP/IP Configuration The default IP address of the Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router is And the default Subnet Mask is These values can be changed as you desire. In this guide, we use all the default values for description. Connect the local PC to the LAN/WAN port of the modem router. And then you can configure the IP address for your PC in the following way. Obtain an IP address automatically 1) Set up the TCP/IP Protocol in "Obtain an IP address automatically" mode on your PC. If you need instructions as to how to do this, please refer to T3 in Appendix B: Troubleshooting. 2) Then the built-in DHCP server will assign IP address for the PC. Now, you can run the Ping command in the command prompt to verify the network connection. Please click the Start menu on your desktop, select run tab, type cmd or command in the field and press Enter. Type ping on the next screen, and then press Enter. If the result displayed is similar to the screen below, the connection between your PC and the router has been established. If the result displayed is similar to the screen shown below, it means that your PC has not connected to the router. You can check it following the steps below: 9

21 1) Is the connection between your PC and the router correct? The LEDs of LAN port which you link to the device and the LEDs on your PC's adapter should be lit. 2) Is the TCP/IP configuration for your PC correct? If the router's IP address is , your PC's IP address must be within the range of ~ Quick Installation Guide With a Web-based utility, it is easy to configure and manage the Archer D7 AC1750 Wireless Dual Band Gigabit ADSL2+ Modem Router. The Web-based utility can be used on any Windows, Macintosh or UNIX OS with a Web browser, such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari. 1. To access the configuration utility, open a web-browser and type the default address in the address field of the browser. Figure 3-1 After a moment, a login window will appear, similar to the Figure 3-2. Enter admin for the User Name and Password, both in lower case letters. Then click the Login button or press the Enter key. Figure

22 Note: 1) Do not mix up the user name and password with your ADSL account user name and password which are needed for PPP connections. 2) If the above screen does not pop up, it means that your Web-browser has been set to a proxy. Go to Tools menu Internet Options Connections LAN Settings, in the screen that appears, cancel the Using Proxy checkbox, and click OK to finish it. 2. After your successful login, you will see the Login screen as shown in Figure 3-3. Click Quick Setup menu to access Quick Setup Wizard. Figure The Quick Setup page will appear for you to quickly configure your modem router, Click Next to continue. Figure Select the Region and the Time Zone from the drop-down list, then click Next. Figure

23 5. Select Yes and then click Next to continue. Note: Figure 3-6 If the connection type can not be detected, please select No to configure it manually (shown in Figure 3-7). A. Configuration for PPPoE/PPPoA Figure 3-7 Enter the Username, Password given by your ISP, and then click Next. Figure

24 Note: If you are using the modem router on a new DSL line and have not completed your DSL provider s online registration, you may be using a generic username and password. When registration is completed, you will need to update the username and password if you have created a new one. B. Configuration for Dynamic IP or Bridge This type doesn't need to be configured. C. Configuration for Static IP or IPoA Enter the Static IP or IPoA information provided by your ISP, and then click Next. Figure Configure the basic parameters for 2.4GHz wireless network in the following screen as shown in Figure 3-10, and then click Next. Figure Configure the basic parameters for 5GHz wireless network in the following screen as shown in Figure 3-11, and then click Next. 13

25 Figure On this page, please confirm all parameters. Click Back to modify or click the Save button to save your configuration. Figure You will see the Complete screen below, click Finish to complete these settings. 14

26 Figure 3-13 The basic settings for your modem router are completed. Please open the web browser and try to log on to to test your Internet connection. 15

27 Chapter 4. Configuring the Modem Router This chapter will show each Web page's key function and the configuration way. 4.1 Login After your successful login, you will see the twenty-three main menus on the left of the Web-based utility. On the right, there are the corresponding explanations and instructions. The detailed explanations for each Web page s key function are listed below. 4.2 Status Choose Status, you can see the corresponding information about Device Information, DSL, WAN, LAN and Wireless. 16

28 Figure Quick Setup Please refer to Section 3.2 Quick Installation Guide. 17

29 4.4 Operation Mode Choose Operation Mode, and you will see the screen as shown in Figure 4-2. Select your desired mode and then click Save. Figure 4-2 DSL Modem Router Mode: The device enables multi-users to share Internet via ADSL using its ADSL port and share it wirelessly at 1300Mbps wireless speeds over the crystal clear 5GHz band and 450Mbps over the 2.4GHz band. Wireless Router Mode: The device enables multi-users to share Internet via Ethernet WAN (EWAN) using its interchangeable LAN4/WAN port and share it wirelessly at 1300Mbps wireless speeds over the crystal clear 5GHz band and 450Mbps over the 2.4GHz band. After you click the Save button, the Note Dialog will appear. Click OK and then the modem router will reboot. Please wait. 4.5 Network Note Dialog Choose Network, there are many submenus under the main menu. Click any one of them, and you will be able to configure the corresponding function. 18

30 4.5.1 WAN Settings Choose Network WAN Settings, and you will see the WAN Port Information Table in the screen similar to Figure 4-3, which describes the WAN port settings and the relevant manipulation to each interface. There are six different configurations for the connection types, which are Static IP, Dynamic IP, PPPoE, PPPoA, IPoA and Bridge. You can select the corresponding types according to your needs. Figure 4-3 Click Add to add a new entry, you can configure the parameters for ATM and WAN Service in the next screen (shown in Figure 4-4). 19

31 Figure Static IP Select this option if your ISP provides static IP information to you. You should set static IP address, IP subnet mask, and gateway address in the screen below. 20

32 Figure 4-5 ATM Configuration: VPI (0~255): Identifies the virtual path between endpoints in an ATM network. The valid range is from 0 to 255. Please input the value provided by your ISP. VCI (1~65535): Identifies the virtual channel endpoints in an ATM network. The valid range is from 1 to (1 to 31 is reserved for well-known protocols). Please input the value provided by your ISP. Click Advance, advanced selections of ATM Configuration can be shown. Encapsulation Mode: Select the encapsulation mode for the Static IP Address. Here you can leave it default. ATM Qos Type: Select ATM Qos Type provided by ISP, and the type is UBR by default. WAN Service Setup: Enable IPv4:Check the box to enable IPv4. IP Address: Enter the IP address in dotted-decimal notation provided by your ISP. Subnet Mask: Enter the subnet Mask in dotted-decimal notation provided by your ISP, usually is Default Gateway (Optional): Enter the gateway IP address in dotted-decimal notation provided by your ISP. 21

33 DNS Server/ Secondary DNS Server: Here you can set DNS Server (at least one) manually. The Route will use this DNS Server for priority. Enable IPv6: Check the box to enable IPv6. IPv6 Address: Enter the IPv6 address provided by your ISP. Prefix Length: Enter the prefix length of the IPv6 address. The default value is 64. IPv6 Gateway: Enter the gateway IPv6 address provided by your ISP. IPv6 DNS Server / Secondary IPv6 DNS Server: Here you can set IPv6 DNS Server (at least one) manually. The Route will use this IPv6 DNS Server for priority. Default Gateway: Select a WAN Interface from the drop-down list as the IPv4 default gateway. IPv6 Default Gateway: Select a WAN Interface from the drop-down list as the IPv6 default gateway. Click Advance, advanced selections of WAN Service Setup can be shown. MTU (bytes): Maximum Transmission Unit Size. Check this box then you can change the MTU size. The default MTU value is 1500 Bytes. It is not recommended that you change the default value unless required by your ISP. Enable NAT: This technology translates the IP addresses of a local area network to a different IP address for the Internet. If this modem router is hosting your network s connection to the Internet, please select the check box. If another Router exists in your network, you don t need to select the option. Enable Fullcone NAT: It is a type of NAT, if not enabled, the default NAT will act. Enable SPI Firewall: A SPI firewall enhances network s security. Select the option to use a firewall, or else without a firewall. Enable IGMP Proxy: IGMP (Internet Group Management Protocol) is used to manage multicasting on TCP/IP networks. Some ISPs use IGMP to perform remote configuration for client devices, such as the modem router. The default value is disabled, and if you are not sure, please contact your ISP or just leave it. Click the Save button to save the settings Dynamic IP Select this option, the modem router will be able to obtain IP network information dynamically from a DHCP server provided by your ISP. 22

34 Figure 4-6 Click Advance, advanced selections for WAN Service Setup can be shown. MTU (bytes): Maximum Transmission Unit Size. Check this box then you can change the MTU size. The default MTU value is 1500 Bytes. It is not recommended that you change the default value unless required by your ISP. Enable NAT: This technology translates the IP addresses of a local area network to a different IP address for the Internet. If this modem router is hosting your network s connection to the Internet, please select the check box. If another Router exists in your network, you don t need to select the option. Enable Fullcone NAT: It is a type of NAT, if not enabled, the default NAT will act. Enable SPI Firewall: A SPI firewall enhances network s security. Select the option to use a firewall, or else without a firewall. Enable IGMP Proxy: IGMP (Internet Group Management Protocol) is used to manage multicasting on TCP/IP networks. Some ISPs use IGMP to perform remote configuration for client devices, such as the modem router. The default value is disabled, and if you are not sure, please contact your ISP or just leave it. 23

35 Get IP with Unicast: This is disabled by default. The minority of DHCP Server of ISP will not support to enable this. When the Route is connected right but IP cannot get, you can select this box. Set DNS Server manually: Choose Set DNS Server manually, you can set DNS Server manually here. The modem router will use this DNS Server for priority. Get IPv6 Address with Unicast: This is disabled by default. The minority of DHCPv6 Server of ISP will not support to enable this. When the modem router is connected right but IPv6 address cannot get, you can select this box. Set IPv6 DNS Server manually: Choose Set IPv6 DNS Server manually, you can set IPv6 DNS Server manually here. The modem router will use this IPv6 DNS Server for priority. Host Name: Here displays model No. of your modem router. Click the Save button to save the settings PPPoE If your ISP provides a PPPoE connection and you need to use an ATM Interface, choose PPPoE in the drop-down list, and then the screen will be displayed as below. 24

36 Figure 4-7 PPP Username/Password/Confirm Password: Enter the User Name, Password and Confirm Password provided by your ISP. These fields are case-sensitive. Connection Mode: For PPPoE connection, you can select Always on or Connect on demand or Connect manually. Connect on demand is dependent on the traffic. If there is no traffic (or Idle) for a pre-specified period of time, the connection will tear down automatically. And once there is traffic send or receive, the connection will be automatically on. Authentication Type: Select the Authentication Type from the drop-down list, the default method is AUTO_AUTH, and you can leave it as a default setting. Enable IPv4: Check this box to enable IPv4. Enable IPv6: Check this box to enable IPv6. Default Gateway: Select a WAN connection from the drop-down list as the IPv4 default gateway. 25

37 IPv6 Default Gateway: Select a WAN connection from the drop-down list as the IPv6 default gateway. Click Advance, advanced selections for WAN Service Setup can be shown. Service Name/Server Name: Enter the Service Name and Server Name if it was provided by your ISP. You can leave them blank, if the ISP doesn t provide them. MTU (bytes): Maximum Transmission Unit Size. Check this box then you can change the MTU size. The default MTU value is 1500 Bytes. It is not recommended that you change the default value unless required by your ISP. Enable Fullcone NAT: It is a type of NAT, if not enabled, the default NAT will act. Enable SPI Firewall: A SPI firewall enhances network s security. Select the option to use a firewall, or else without a firewall. Enable IGMP Proxy: IGMP (Internet Group Management Protocol) is used to manage multicasting on TCP/IP networks. Some ISPs use IGMP to perform remote configuration for client devices, such as the modem router. The default value is disabled, and if you are not sure, please contact your ISP or just leave it. Use IP address specified by ISP: Choose Use IP address specified by ISP, you can enter the IP address provided by your ISP. Set DNS Server manually: Choose Set DNS Server manually, you can set DNS Server manually here. The modem router will use this DNS Server for priority. Use IPv6 address specified by ISP: Choose Use IPv6 address specified by ISP, you can enter the IPv6 address provided by your ISP. Set IPv6 DNS Server manually: Choose Set IPv6 DNS Server manually, you can set IPv6 DNS Server manually here. The modem router will use this IPv6 DNS Server for priority. Click the Save button to save the settings PPPoA If your ISP provides a PPPoA connection and you need to use an ATM Interface, choose PPPoA in the drop-down list, and then the screen will be displayed as below. The configuration is similar to PPPoE. Please refer to the section PPPoE to configure this part. 26

38 Figure IPoA If your ISP provides an IPoA connection, select IPoA option for the Connection Type on the screen. 27

39 Figure 4-9 IP Address/Subnet Mask: Enter the IP Address and Subnet Mask provided by ISP. If you forget, you can ask your ISP. DNS Server/Secondary DNS Server: Type in your preferred DNS server. Default Gateway: select a WAN Interface from the drop-down list as the IPv4 default gateway Bridge If you select this type of connection, the modem can be configured to act as a bridging device between your LAN and your ISP. Bridges are devices that enable two or more networks to communicate as if they are two segments of the same physical LAN. Figure

40 Note: After you finish the Internet configuration, please click Save to make the settings take effect Interface Grouping Choose Network Interface Grouping, you can view all the current groups on this page (shown in Figure 4-11). Figure 4-11 Enable the Virtual LAN Ports feature: Virtual LAN (VLAN) is a group of devices on one or more LANs that are configured so that they can communicate as if they were attached to the same LAN. Because VLANs are based on logical instead of physical connections, it is very flexible for user/host management, bandwidth allocation and resource optimization. If you want to active Interface Grouping function, please check the box to enable the Virtual LAN Ports feature. Note: It is not allowed to disable the VLAN with Ethernet Connection enabled. To support this feature, you must create mapping groups with appropriate LAN and WAN interfaces using the Add button. The Remove button will remove the grouping and add the ungrouped interfaces to the Default group. Only the default group has IP interface. Click the Add button. You can add a new interface group in the next screen. For example, you want LAN1 and LAN3 to be a group called Group 1 over br_8_35_0 WAN interface, you can refer to the following figure. 29

41 Figure 4-12 Click Save to make the entry effective immediately LAN Settings Choose Network LAN Settings menu, and you will see the LAN screen (shown in Figure 4-13). Please configure the parameters for LAN ports according to the descriptions below. Figure 4-13 IP Address: You can configure the modem router s IP Address and Subnet Mask for LAN Interface. IP Address: Enter the modem router s local IP Address, then you can access to the Web-based Utility via the IP Address, the default value is Subnet Mask: Enter the modem router s Subnet Mask, the default value is

42 Enable IGMP Snooping: If you select the option, please choose the IGMP Mode: Standard Mode or Blocking Mode. Enable Second IP: You can configure the modem router s second IP Address and Subnet Mask for LAN Interface through which you can also access to the Web-based Utility as the default IP Address and Subnet Mask. DHCP Server: These settings allow you to configure the modem router s Dynamic Host Configuration Protocol (DHCP) server function. The DHCP server is enabled by default for the modem router s Ethernet LAN interface. DHCP service will supply IP settings to computers which are configured to automatically obtain IP settings that are connected to the modem router though the Ethernet port. When the modem router is set for DHCP, it becomes the default gateway for DHCP client connected to it. Keep in mind that if you change the IP address of the modem router, you must change the range of IP addresses in the pool used for DHCP on the LAN. Start IP Address: Enter a value for the DHCP server to start with when issuing IP addresses. Because the default IP address for the modem router is , the default Start IP Address is , and the Start IP Address must be or greater, but smaller than End IP Address: Enter a value for the DHCP server to end with when issuing IP addresses. The End IP Address must be smaller than The default End IP Address is Leased Time: The Leased Time is the amount of time in which a network user will be allowed connection to the modem router with their current dynamic IP address. Enter the amount of time, in hours, then the user will be leased this dynamic IP address. After the dynamic IP address has expired, the user will be automatically assigned a new dynamic IP address. The default is 1440 minutes. The detailed configuration about DHCP server, please refer to section 4.6 DHCP Server IPv6 LAN Settings Choose menu Network IPv6 LAN Settings, you can configure LAN IPv6 interface for your modem router. Figure

43 Address Autoconfiguration Type: Select a type to assign IPv6 addresses to the computers in your LAN. RADVD and DHCPv6 Server are provided. 1) If RADVD is selected, it doesn t need to be configured. 2) If DHCPv6 Server is selected, please complete the following parameters. Figure 4-15 Start IPv6 Address: Enter a value for the DHCPv6 server to start with when issuing IPv6 addresses. End IPv6 Address: Enter a value for the DHCPv6 server to end with when issuing IPv6 addresses. Leased Time: The Leased Time is the amount of time in which a network user will be allowed connection to the modem router with their current dynamic IPv6 address. Enter the amount of time, in hours, then the user will be leased this dynamic IPv6 address. After the dynamic IPv6 address has expired, the user will be automatically assigned a new dynamic IPv6 address. The default is seconds. Site Prefix Configuration Type: Select a type to assign prefix to IPv6 addresses. Delegated and Static are provided. 1) If Delegated is selected, please complete the following parameters. Figure 4-16 Prefix Delegated WAN Connection: Select a WAN connection form the drop-down list to assign prefix. 2) If Static is selected, please complete the following parameters. Figure 4-17 Site Prefix: Enter a value for the site prefix. Site Prefix Length: Enter a value for the site prefix length. 32

44 Click the Save button to save the settings MAC Clone Choose menu Network MAC Clone, you can configure the MAC address of the WAN Interface as shown below. The WAN Interface List displays the WAN Interfaces you have configured on the section WAN Settings and its default MAC Address. You can select corresponding WAN Interface from the drop-down list and click Clone MAC To button to clone your current PC MAC, and then click Save. Figure 4-18 Note: Only the WAN Ports can use MAC Address Clone function. All the clone MAC addresses must not be the same with each other ALG Settings Choose menu Network ALG Settings, and then you can configure the basic security in the screen as shown in Figure Figure 4-19 Virtual Private Network (VPN): VPN Passthrough must be enabled if you want to allow VPN tunnels using VPN protocols to pass through the modem router. 33

45 PPTP Passthrough: Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point Protocol (PPP) to be tunneled through an IP network. To allow PPTP tunnels to pass through the modem router, click Enable. L2TP Passthrough: Layer Two Tunneling Protocol (L2TP) is the method used to enable Point-to-Point sessions via the Internet on the Layer Two level. To allow L2TP tunnels to pass through the modem router, click Enable. IPSec Passthrough: Internet Protocol security (IPSec) is a suite of protocols for ensuring private, secure communications over Internet Protocol (IP) networks, through the use of cryptographic security services. To allow IPSec tunnels to pass through the modem router, click Enable. Application Layer Gateway (ALG): It is recommended to enable Application Layer Gateway (ALG) because ALG allows customized Network Address Translation (NAT) traversal filters to be plugged into the gateway to support address and port translation for certain application layer "control/data" protocols such as FTP, TFTP etc. FTP ALG: To allow FTP clients and servers to transfer data across NAT, click Enable. TFTP ALG: To allow TFTP clients and servers to transfer data across NAT, click Enable. H323 ALG: To allow H323 clients and servers to transfer data across NAT, click Enable. SIP ALG: To allow SIP clients and servers to transfer data across NAT, click Enable. Click the Save button to save your settings DSL Settings Choose Advanced Setup DSL Settings, you can select the DSL Modulation Type and Annex Type in the next screen. The DSL feature can be selected when you meet the physical connection problem. Please check the proper settings with your Internet service provider. Figure 4-20 DSL Modulation Type: Select the DSL operation Modulation Type which your DSL connection uses. Annex Type: Select the DSL operation Annex Type which your DSL connection uses. Click the Save button to save your settings IPSec VPN Choose Network IPSec VPN, you can Add/Remove or Enable/Disable the IPSec tunnel connections on the screen as shown in Figure

46 Figure 4-21 This section will guide you to configure a VPN tunnel between two Archer D7s. The topology is as follows. Note: You could also use other VPN Routers to set VPN tunnels with Archer D7. Archer D7 supports up to 10 VPN tunnels simultaneously. Click Add New Connection in Figure 4-21 and then you will enter the screen shown in Figure

47 Figure 4-22 IPSec Connection Name: Enter a name for your VPN. Remote IPSec Gateway Address (URL): Enter the destination gateway IP address in the box which is the public WAN IP or Domain Name of the remote VPN server endpoint. (For example: Input in Device1, Input in Device 2) Tunnel access from local IP addresses: Choose Subnet if you want the Whole LAN to join the VPN network, or else choose Single Address if you want single IP to join the VPN network. IP Address for VPN: Enter the IP address of your LAN. (For example: Input in Device1, Input in Device2) IP Subnetmask: Enter the Subnet mask of your LAN. ( For example: Input in both Device1 and Device2) Tunnel access from remote IP addresses: Choose Subnet if you want the Remote Whole LAN to join the VPN network, or else choose Single Address if you want single IP to join the VPN network. IP Address for VPN: Enter the IP address of the Remote LAN. ( For example: Input in Device1,Input in Device2) IP Subnetmask: Enter the subnetmask of the remote LAN. ( For example: Input in both Device1 and Device2) Key Exchange Method: Select Auto (IKE) or Manual. Authentication Method: Select Pre-Shared Key (recommended). Pre-Shared Key: Input the Pre-Shared key for Authentication. (For example: Input ) Perfect Forward Secrecy: PFS is an additional security protocol. We recommend you leave the Advanced Settings as default value. After complete the basic settings and click Save/Apply in both Device1 and Device2, PCs in LAN1 could communicate with PCs in remote LAN2. (For example: You can ping the IP address of PC2 which is in PC1) Note: The VPN Servers Endpoint from both ends must use the same pre-shared keys and Perfect Forward Secrecy settings. 36

48 Click Show Advanced Settings and then you can configure the Advanced Settings. Figure 4-23 Mode: Select Main Mode to configure the standard negotiation parameters for IKE phase1. Aggressive Mode: Select Aggressive Mode to configure IKE phase1 of the VPN Tunnel to carry out negotiation in a shorter amount of time. (Not Recommended-Less Secure) Note: The difference between the two is that aggressive mode will pass more information in fewer packets, with the benefit of slightly faster connection establishment, at the cost of transmitting the identities of the security firewall in the clear. When using aggressive mode, some configuration parameters such as Diffie-Hellman groups, and PFS can not be negotiated, resulting in a greater importance of having "compatible" configuration on both ends. Key Life Time:Enter the number of seconds for the IPSec lifetime. It is the period of time to pass before establishing a new IPSec security association (SA) with the remote endpoint. The default value is Note: If you want to change the default settings of Advanced Settings, please make sure that both VPN server endpoints use the same Encryption Algorithm, Integrity Algorithm, Diffie-Hellman Group and Key Life time in both phase1 and phase IPTV Choose IPTV, and you will see the screen as shown in Figure

49 Figure 4-24 Enable IPTV: Check the box to enable IPTV function.. VPI (0~255): Identifies the virtual path between endpoints in an ATM network. The valid range is from 0 to 255. Please input the value provided by your ISP. VCI (1~65535): Identifies the virtual channel endpoints in an ATM network. The valid range is from 1 to (1 to 31 is reserved for well-known protocols). Please input the value provided by your ISP. Click the Save button to save your settings. 4.7 DHCP Server Choose DHCP Server, you can see the next submenus: Click any of them, and you will be able to configure the corresponding function DHCP Settings Choose menu DHCP Server DHCP Settings, you can configure the DHCP Server on the page as shown in Figure 4-25.The modem router is set up by default as a DHCP (Dynamic Host Configuration Protocol) server, which provides the TCP/IP configuration for all the PC(s) that are connected to the modem router on the LAN. 38